Who we are
GF’S HAVEN LTD (RC NO: 8092626), Oloye Olajumoke Akinjide Plaza, Opposite Zenith Bank, Dutse Alhaji, Bwari, FCT, Nigeria, is responsible for the personal information described in this notice. You can contact us about your privacy at any time at info@gfshaven.com.
This notice covers our website (www.gfshaven.com) and our online services at apply.gfshaven.com: the study abroad application system, the client portal for technology and business clients, and online payments.
What we collect
- Enquiries. When you use our Contact, Start a Project or Online Learning forms: your name, email address, phone number and the details of your enquiry or project.
- Study abroad applications. Your name, email address, phone number and the programme you are interested in, plus your application reference, its status history, and notes our team records while handling your application.
- Documents you upload. Documents such as your passport, academic transcripts, certificates and CV. These can contain sensitive details such as your date of birth, nationality, passport number and photograph.
- Client portal. For technology and business clients: your name, email address and, if you give them, your company and phone number, together with your project details, the messages you exchange with us and the files you share.
- Payments. Your name, email address, what you are paying for, the amount, and the payment reference and transaction ID. Card and bank details are entered directly with our payment provider, Flutterwave. GF’S HAVEN never sees or stores your full card details.
- Sign-in codes. When you sign in with a one-time code, we keep a scrambled (hashed) version of the code for a short time so we can check it. We never store the code itself.
How we use it
We use your information to respond to your enquiry; to process your study abroad application and prepare submissions to institutions on your behalf; to run your project with you through the client portal; to send you emails about your application, project, invoices and payments; to collect payments and keep financial records; and to keep our services secure. We do not sell your personal information, and we do not use it for advertising.
We rely on your consent and on the need to provide the service you have asked for. We also keep some records because the law requires it, for example financial records.
Who we share it with
We share information only where needed to provide our services, or where the law requires it:
- Educational institutions and similar bodies, when we submit an application or documents on your behalf, at your request.
- Service providers that run our systems for us: Netlify (website hosting and enquiry forms), Supabase (secure database and file storage), Resend (sending our emails) and Flutterwave (payment processing). They may only use your information to provide their service to us.
- Authorities, where we are legally required to share information.
International transfers
Some of our service providers store or process information outside Nigeria, for example in the European Union and the United States. Where this happens, we choose providers that use recognised security and data protection safeguards.
How we protect it
Uploaded documents and project files are kept in private storage that is not publicly accessible. When you or our staff open a file, the system creates a link that works only for a short time. Signing in uses one-time codes sent to your email instead of passwords. Only staff whose role requires it can see your information.
How long we keep it
- Enquiries: up to 12 months from your last contact with us.
- Applications and uploaded documents: while your application is active, and up to 12 months after it ends, unless you ask us to delete them sooner.
- Client portal projects, messages and files: for as long as we work together, and up to 12 months after the project ends.
- Payment and invoice records: for as long as tax and accounting law requires.
After these periods, information is securely deleted.
Cookies
We use only essential cookies, which keep you signed in to the client portal or staff portal. We do not use advertising or tracking cookies. Our website fonts are hosted on our own website, so no font service receives your information when you visit.
Your rights
Depending on where you live, you may have the right to ask for a copy of your personal information, to have it corrected or deleted, to object to or restrict how we use it, or to withdraw your consent. To exercise these rights, contact us at info@gfshaven.com. We may need to confirm your identity first.
If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission, or to the data protection authority in your country.
Applicants under 18
If you are under 18, please involve a parent or guardian when you apply, and let us know so we can include them in our communication.
International visitors
GF’S HAVEN LTD is registered in Nigeria and handles personal information in line with the Nigeria Data Protection Act 2023. For visitors from the EU, UK and elsewhere, we aim to follow recognised data protection principles, including those of the GDPR.
Changes to this notice
We may update this notice as our services change. The date at the top shows when it was last updated.
Visa and immigration disclaimer
GF’S HAVEN LTD does not issue or guarantee visas. Visa and immigration decisions are made solely by the relevant embassy, consulate or immigration authority.